Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/1NE-Mf39vtvrHj4USB5of4kPlOw.roa
File: 1NE-Mf39vtvrHj4USB5of4kPlOw.roa (raw, json)
Hash identifier: UxNtC7T0ctcVoYjVK7A4auWXV7OXtfog1jiAdRwvFS8=
Subject key identifier: D4:D1:3E:31:FD:FD:BE:DB:EB:1E:3E:14:48:1E:68:7F:89:0F:94:EC
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01868BD8A155BBE4AD39C0FD694EA6B38FB7
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/1NE-Mf39vtvrHj4USB5of4kPlOw.roa
Signing time: Sun 26 Feb 2023 03:51:15 +0000
ROA not before: Sun 26 Feb 2023 03:51:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199763
IP address blocks: 2a10:cc44:1c0::/44 maxlen: 48
Validation: Failed, certificate revoked on Sat 09 Dec 2023 15:08:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:8b:d8:a1:55:bb:e4:ad:39:c0:fd:69:4e:a6:b3:8f:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Feb 26 03:51:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d4d13e31fdfdbedbeb1e3e14481e687f890f94ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:db:f0:79:09:97:1e:e2:2b:87:c0:0d:da:0b:
07:20:35:f4:78:2a:fb:31:d9:0f:b7:45:41:cf:e0:
c2:17:21:11:4c:c9:6f:a2:49:1e:fa:a9:dc:4a:a4:
70:14:52:4e:e8:68:22:2d:b3:f1:fa:19:f8:11:fe:
30:29:d3:bd:f8:98:f9:8b:0f:9c:f7:38:5f:7f:d1:
55:3a:48:9d:4e:cc:11:76:7d:ef:5b:7b:cd:e1:5c:
f2:1d:89:1e:3b:2e:40:c3:fa:0f:7c:d0:c7:98:5e:
db:6b:b3:e3:72:ab:6a:aa:80:c6:8b:c7:b4:d6:99:
3c:ac:6b:3a:b9:43:6e:1d:48:0f:7f:0b:3e:2e:16:
24:9d:26:6c:ad:1b:d3:5c:35:e4:dd:c3:0d:1f:0a:
07:ac:b3:ac:b2:2f:28:24:c0:9a:6c:c0:8d:b5:8f:
02:66:13:db:55:a2:28:b0:8f:b8:99:dc:8f:e2:3a:
2e:2b:52:4d:7f:bb:33:fa:c6:13:a8:cb:4c:45:1b:
7f:6f:3c:cf:eb:c4:76:d3:fc:0e:bf:70:53:49:b2:
6b:24:49:8b:5f:b5:bd:33:02:eb:29:0e:4c:df:97:
f3:07:09:bd:cc:8c:f5:17:e6:b4:55:f5:0f:fe:20:
9f:1d:56:f7:ac:5e:21:b6:43:93:6b:78:b1:80:aa:
bb:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:D1:3E:31:FD:FD:BE:DB:EB:1E:3E:14:48:1E:68:7F:89:0F:94:EC
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/1NE-Mf39vtvrHj4USB5of4kPlOw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:cc44:1c0::/44
Signature Algorithm: sha256WithRSAEncryption
8a:51:07:b7:cc:b6:25:9a:90:2c:06:8d:f3:d6:ff:e5:30:83:
f9:c9:ed:6c:c5:6e:a4:a1:9a:00:45:f9:49:6a:92:0e:0a:2e:
b7:99:bf:32:67:8f:1f:5d:7c:9d:37:90:58:66:83:4e:2a:d9:
e2:a2:b3:85:c0:cb:6e:23:b5:fd:ae:58:bb:5d:d2:e3:1f:84:
67:40:08:60:24:21:b5:0a:10:c7:85:c1:e3:2b:3d:49:9a:95:
72:ff:7a:dc:f2:be:80:4c:78:54:5b:d4:ca:fc:a4:f6:ca:15:
59:be:02:9f:b1:1a:7f:d8:43:ff:88:3d:2e:f2:91:e8:ce:c5:
be:ab:96:ed:6b:d4:b2:c7:b8:ee:39:73:78:66:fb:32:da:d0:
d8:7f:d5:7e:00:3b:56:8a:f9:16:bf:00:63:6e:76:b3:cf:64:
08:51:58:3c:cf:89:99:9f:9e:0e:77:c5:33:ef:22:35:8d:cd:
ac:2e:1b:83:a9:69:ac:e2:7e:61:36:bd:3e:65:cc:8f:bc:7f:
9d:02:a5:c1:5f:3a:18:41:4c:e4:88:c2:e0:a9:2f:3a:db:44:
3e:34:00:fa:e5:3e:34:99:ed:5e:73:02:01:10:59:05:63:97:
c1:d0:cc:0e:62:e6:f6:68:34:72:bc:cb:2b:94:97:22:f2:3e:
97:f7:f7:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:21 2024 by rpki-client on console-fra.rpki-client.org